WHAT IS CLAIMED IS: 



1. A system for controlling access to a resource of a 

2 computer system, comprising: 

3 a database of problems and corresponding precalculated 

4 solutions; 

5 a problem retriever that responds to a request from a client 

6 for access to said resource by retrieving one of said problems from 

7 said database and transmitting said one of said problems to said 

8 client; and 

%p a solution evaluator that, upon receiving a putative solution 

W 

nffj from said client, employs said database to validate said putative 

IfB solution and, if said putative solution is valid, grants said 

PSf client access to said resource. 
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nj 2. The system as recited in Claim 1 wherein said problems 

3 : : 

O comprise outputs and portions of corresponding inputs to a one-way 

3 function. 



3. The system as recited in Claim 2 wherein said one-way 
2 function is a Message Digest-5 function. 

4. The system as recited in Claim 1 wherein said problem 
2 retriever replaces said one of said problems and a corresponding 
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3 one of said solutions when said putative solution is valid. 

5. The system as recited in Claim 1 wherein said problem 

2 retriever replaces said one of said problems and a corresponding 

3 one of said solutions only when said putative solution is valid. 

6 . The system. as recited in Claim 1 wherein said solution 

2 evaluator grants said client access to said resource by allocating 

3 memory associated with said resource to serve said client. 
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^3 7. The system as recited in Claim 1 wherein said resource is 

y i 

fg selected from the group consisting of: 
gg a network server, 

^ an electronic mail server, and 

f5 a main database . 
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8. A method of controlling access to a resource of a 

2 computer system, comprising: 

3 creating a database of problems and corresponding 

4 precalculated solutions; 

5 responding to a request from a client for access to said 

6 resource by retrieving one of said problems from said database and 

7 transmitting said one of said problems to said client; 

8 upon receiving a putative solution from said client, employing 

9 said database to validate said putative solution; and 

10 if said putative solution is valid, granting said client 

"n 

ljE; access to said resource. 
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fU 9. The method as recited in Claim 8 wherein said problems 

*2 comprise outputs and portions of corresponding inputs to a one-way 

3 

r3 function. 
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10. The method as recited in Claim 9 wherein said one-way 

5 J 

2 function is a Message Digest-5 function. 

11. The method as recited in Claim 8 further comprising 

2 replacing said one of said problems and a corresponding one of said 

3 solutions when said putative solution is valid. 

12. The method as recited in Claim 8 further comprising 
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2 replacing said one of said problems and a corresponding one of said 

3 solutions only when said putative solution is valid. 

13. The method as recited in Claim 8 wherein said granting 

2 comprises allocating memory associated with said resource to serve 

3 said client. 

14. The method as recited in Claim 8 wherein said resource is 

2 selected from the group consisting of: 

3 a network server, 

O 

Jfe an electronic mail server, and 

2': s 

f§ a main database. 
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15. A system for controlling access to a resource of a 

2 computer system, comprising: 

3 a database of problems and corresponding precalculated 

4 solutions; 

5 a pointer that points to a particular problem/solution entry 

6 in said database; 

7 a problem retriever that responds to a request from a client 

8 for access to said resource by retrieving one of said problems from 

9 said database according to said pointer and transmitting said one 
10 of said problems and said pointer to said client; and 

o 

Ijb a solution evaluator that, upon receiving a putative solution 

]fg ' and said pointer from said client, employs said database and said 

lfil pointer to validate said putative solution and, if said putative 

M solution is valid, grants said client access to said resource. 
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16. The system as recited in Claim 15 wherein said problems 
comprise outputs and portions of corresponding inputs to a one-way 
function . 

17. The system as recited in Claim 16 wherein said one-way 
function is a Message Digest-5 function. 

18. The system as recited in Claim 15 wherein said problem 
retriever replaces said one of said problems and a corresponding 
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3 one of said solutions when said putative solution is valid. 

19. The system as recited in Claim 15 wherein said problem 

2 retriever replaces said one of said problems and a corresponding 

3 one of said solutions only when said putative solution is valid. 

20. The system as recited in Claim 15 wherein said solution 

2 evaluator grants said client access to said resource by allocating 

3 memory associated with said resource to serve said client. 

21. The system as recited in Claim 15 wherein said- resource 
sfj is selected from the group consisting of: 

fg a network server, 

^ an electronic mail server, and 

f5 a main database. 



5 3 



-35- 



